netflix-clone-iota-five[.]vercel[.]app

PhishDestroy has identified netflix-clone-iota-five.vercel.app as a high-risk brand impersonation threat. This domain is actively impersonating Apple, using a deceptive page title of 'Netflix' to lure victims into a false sense of security. The site is currently active and poses a significant risk to users who may inadvertently disclose sensitive information or credentials.

Technical analysis reveals that the domain was created on March 08, 2026, and is registered through Vercel Inc. It resolves to the IP address 216.198.79.3 and is flagged by 23 out of 95 security vendors on VirusTotal. Additionally, it appears on one security blocklist, and Google Safe Browsing flags it as phishing. The SSL certificate is issued by Google Trust Services (WR1), which may lend an unwarranted appearance of legitimacy. These indicators collectively confirm the malicious nature of the site.

To mitigate the threat, users should avoid visiting the domain and immediately report any interactions to their IT security team. Organizations should update web filters and blocklists to prevent access to this domain. Since this is a brand impersonation attack targeting Apple, users should verify any communications claiming to be from Apple through official channels. PhishDestroy recommends monitoring for similar domains using the unique seed c2ad89 to identify related threats.